South Africa’s Draft Crypto Regulations Are Unconstitutional and Authoritarian Overreach

24 April 2026 7 min read

The National Treasury has published draft regulations that would bring cryptocurrency under South Africa’s capital flow management framework. The rules would require you to declare your crypto holdings to the government, restrict how you move them, give enforcement officers the power to seize digital assets — and compel you to hand over your private keys on demand. The Gazette notice gives the public just 30 days to respond — comments close on 18 May 2026.

Three things to know:

South Africa’s 1961 exchange control regulations are being replaced — and crypto is now in scope. The Draft Capital Flow Management Regulations 2026 modernise 65-year-old rules and, for the first time, explicitly include crypto assets in the regulatory framework alongside foreign currency, gold, and securities. Crypto is no longer in a grey area. It is now treated like a controlled asset.
You would be required to declare your crypto holdings to the government. Any resident holding crypto assets above a threshold (to be determined by the Minister of Finance) must declare them within 30 days. You may only buy, sell, or lend crypto above that threshold through an “authorised crypto asset service provider.” The threshold amounts have not been disclosed.
The government wants the power to demand your private keys — and jail you if you refuse. Regulation 25(5) states that enforcement officers can require any person to disclose “any password, pin, private key, or other information” needed to access crypto assets. Refusal is a criminal offence carrying up to five years in prison.

A Sledgehammer Looking for a Nail

The Gazette notice offers four justifications: aligning with OECD and FATF recommendations, combating money laundering and terrorist financing, bringing crypto under the exchange control framework, and imposing sanctions for non-compliance. If these sound familiar, they should. “Money laundering and terrorist financing” has become the universal password for removing civil liberties — trotted out every time the state wants new powers, never accompanied by data, never followed by a review of whether the previous round of restrictions actually worked.

Where is the evidence that crypto is being used for significant money laundering in South Africa? Where are the numbers? How many prosecutions? How many rands in illicit flows detected through crypto specifically? The Treasury provides none of this. There is no baseline, no impact assessment, no measurable objective, and no sunset clause or review period. The public is simply expected to accept that “AML” is a sufficient reason to surrender fundamental rights — again — with no mechanism to ever evaluate whether the trade-off was worth it.

South Africa already has anti-money laundering legislation. The Financial Intelligence Centre Act (FICA) already applies to crypto asset service providers. The FSCA already licenses and regulates crypto exchanges. If the goal is genuinely AML compliance, that framework already exists and is already being enforced. So what is this actually about?

What these regulations do is something entirely different. They don’t just regulate service providers — they reach into the wallets of individual citizens. They don’t just combat illicit flows — they require every person above an undisclosed threshold to declare their holdings to the state. They don’t just oversee transactions — they give officers the power to demand your private keys at a checkpoint.

The stated rationale does not match the scope of the powers being claimed. The public is given just 30 days to respond to a 35-page framework that would fundamentally reshape the relationship between South African citizens and their digital assets.

Property rights are not a policy lever for the state to adjust. They are the bedrock of civilisation — the foundation on which every free society is built. The state has no legitimate claim to your private property, and any framework that asserts one without so much as an explanation should be treated with the seriousness it deserves. The Treasury has offered no justification. The public should demand one.

What the Regulations Would Do to You

The draft regulations define “crypto asset” broadly — any digital representation of value that can be traded or transferred electronically. They create a new category of “authorised crypto asset service provider,” meaning exchanges and custodians licensed under the framework.

The key restrictions:

Buying and selling: You cannot purchase, sell, lend, or borrow crypto assets above a “determined threshold” except through an authorised provider (Regulation 3). Peer-to-peer transactions above the threshold become illegal.
Moving crypto out of SA: You cannot export crypto assets from the Republic without permission from National Treasury (Regulation 4). This applies to digital transfers — not just physically carrying a device across the border.
Mandatory declarations: If you hold crypto above the threshold, you must declare it within 30 days. Once declared, you can only dispose of it under conditions imposed by National Treasury (Regulation 10). Your property, held at the government’s discretion.
Search and seizure: Officers may search any person, vehicle, or premises for undeclared crypto at any port of entry or exit (Regulation 25).
Forced key disclosure: Officers can compel you to hand over passwords, PINs, and private keys. This is not a court order. This is an officer at a checkpoint demanding access to your digital assets (Regulation 25(5)).
Penalties: Contravention carries a fine of up to R1 million or five years’ imprisonment — or the value of the crypto involved, whichever is greater (Regulation 29). The forfeiture provision means the state can take everything.

The “determined threshold” amounts are not specified anywhere in the document. They will be set separately by the Minister of Finance by notice in the Gazette. The public is being asked to comment on a regulatory framework without knowing who it actually applies to.

An Assault on Constitutional Rights

South Africa’s Constitution — the same Constitution that ended apartheid-era control over citizens’ movements and property — protects several rights that these regulations directly threaten.

Section 14: Privacy. The government would gain the power to demand disclosure of your financial holdings and access to your digital wallets. Not through a court process. Through an enforcement officer’s demand.

Section 25: Property rights. Your crypto assets would exist in a state of conditional ownership. You hold them, but you may only move, sell, or transfer them with government permission. Property you cannot freely dispose of is not truly your property.

Section 35: Right against self-incrimination. Compelling a person to disclose a private key is compelling them to provide evidence that may be used against them. This is the kind of coercive power that constitutional democracies have spent centuries restraining.

The forced key disclosure provision deserves particular scrutiny. The United Kingdom’s Regulation of Investigatory Powers Act 2000 contains a similar provision — and it has been widely criticised by civil liberties organisations as incompatible with fundamental rights. South Africa is proposing to go further, placing this power not in the hands of courts, but of border enforcement officers.

Call It What It Is

Let’s be direct about the direction this points in. Mandatory asset declarations. State permission to transact. Warrantless searches. Forced disclosure of private keys. Seizure and forfeiture of property. These are not the instruments of a free society. These are the instruments of authoritarian control.

South Africa, of all countries, should recognise this pattern. We lived under a regime that controlled what citizens could own, where they could move, and what they could do with their money. The exchange controls being replaced by these regulations were themselves products of that era — tools of an apartheid government that wanted to control capital flows to maintain power. The 1961 regulations were born in the same year South Africa declared itself a republic and left the Commonwealth. They were instruments of a state that did not trust its own people.

Sixty-five years later, the Treasury’s response is not to dismantle that framework of control. It is to expand it. To modernise the surveillance apparatus and extend it into the digital realm. To assert that the state has the right to know what you own, to dictate how you may use it, and to compel you — under threat of imprisonment — to open your digital life to an officer on demand.

This is Orwellian. There is no other word for it. A government that can force you to surrender your private keys can force you to surrender anything. A government that requires you to declare your assets and then restricts how you may use them does not recognise your property rights — it tolerates them, conditionally, and reserves the right to revoke that tolerance at any time.

South Africa did not write the most progressive constitution on the African continent so that it could be hollowed out by regulation. We cannot tolerate this direction. Not as a free nation. Not after everything it cost to become one.

The Unenforceable and the Absurd

Beyond the constitutional concerns, the regulations betray a fundamental misunderstanding of how crypto works.

A border officer can search your luggage for gold krugerrands. Searching for Bitcoin is a different problem entirely. The asset might be on a hardware wallet, on a mobile app, on a custodial platform in another jurisdiction, or stored as a 12-word seed phrase committed to memory. You can cross any border in the world carrying a billion dollars in Bitcoin with nothing but your memory.

The regulations are written as if crypto assets behave like physical goods — as if they can be found in a suitcase, seized at a checkpoint, and locked in an evidence room. They cannot. This framework attempts to apply 20th-century border control logic to a 21st-century technology that was specifically designed to be borderless.

What You Should Do

The draft regulations are open for public comment — but there is confusion around the deadline. The Gazette notice says comments are due “within 30 days,” putting the deadline at 18 May 2026. The gov.za media statement says 10 June 2026 — more than three weeks later. The two documents also provide different email addresses: the Gazette says [email protected], the media statement says [email protected].

This is a government proposing to jail people for five years over crypto non-compliance, and it cannot coordinate a deadline or an email address across its own publications. Submit to both. Assume the earlier date — 18 May 2026 — and do not wait.

If you want to submit a comment but don’t know where to start, Bitcoin ZAR has published a pre-formatted submission template that you can use or adapt.

If you hold crypto in South Africa, this is not a theoretical exercise. These regulations propose to make it a criminal offence to hold, move, or refuse to disclose your digital assets outside of government-approved channels. The threshold amounts — which will determine whether this reaches into ordinary retail wallets — have deliberately been left out of the document you are being asked to comment on.

Do not assume someone else will respond. Read the draft. Submit your comments. Share this article. The best time to push back on overreach is while the rules are still being written. Once gazetted, they replace the 1961 exchange control regulations entirely — and your crypto becomes the state’s business.

Sources:

Leon Kowalski